decaf-project / DECAF

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
GNU General Public License v3.0
803 stars 168 forks source link

Procinfo compilation error on Ubuntu 14.04.5 #58

Open dkfulp opened 5 years ago

dkfulp commented 5 years ago

Hello,

I am currently trying to get the information needed in the procinfo.ini file from a new guest that I am setting up. The guest is Ubuntu 14.04.5 and I have moved the Makefile and procinfo.c file over to the guest. Upon compilation it gives the attached error.

I know that these files work since I have used the same ones on an Ubuntu 12.04 guest and it worked fine. Do you know of any reason that this would be breaking?

screen shot 2019-01-23 at 3 30 57 pm

enlighten5 commented 5 years ago

Hi, The reason is, for the newer Linux kernel, some data structs are changed a little bit. I modified the procinfo.c file to make it compatible with the new kernel struct. Please find the patched procinfo.c here: https://drive.google.com/file/d/1GUN2RQfv-KHz3HPSoksxhQpkTk6gGIrC/view?usp=sharing and make sure to allocate 2GB ram if VMI functionality is needed.